kubernetes/kops · error

error enabling DNS64: %w

Error message

error enabling DNS64: %w

What it means

ModifySubnetAttribute failed while enabling DNS64 on an IPv6-native (dual-stack, CIDR-less) subnet; the wrapped error is the AWS EC2 API response.

Source

Thrown at upup/pkg/fi/cloudup/awstasks/subnet.go:333

			hostnameType = ec2types.HostnameTypeResourceName
		}
		request := &ec2.ModifySubnetAttributeInput{
			SubnetId:                       e.ID,
			PrivateDnsHostnameTypeOnLaunch: hostnameType,
		}
		_, err := t.Cloud.EC2().ModifySubnetAttribute(ctx, request)
		if err != nil {
			return fmt.Errorf("error modifying hostname type: %w", err)
		}

		if fi.ValueOf(e.CIDR) == "" {
			request = &ec2.ModifySubnetAttributeInput{
				SubnetId:    e.ID,
				EnableDns64: &ec2types.AttributeBooleanValue{Value: aws.Bool(true)},
			}
			_, err = t.Cloud.EC2().ModifySubnetAttribute(ctx, request)
			if err != nil {
				return fmt.Errorf("error enabling DNS64: %w", err)
			}
		} else {
			request = &ec2.ModifySubnetAttributeInput{
				SubnetId:                             e.ID,
				EnableResourceNameDnsARecordOnLaunch: &ec2types.AttributeBooleanValue{Value: changes.ResourceBasedNaming},
			}
			_, err = t.Cloud.EC2().ModifySubnetAttribute(ctx, request)
			if err != nil {
				return fmt.Errorf("error modifying A records: %w", err)
			}
		}

		if fi.ValueOf(e.IPv6CIDR) != "" {
			request = &ec2.ModifySubnetAttributeInput{
				SubnetId:                                e.ID,
				EnableResourceNameDnsAAAARecordOnLaunch: &ec2types.AttributeBooleanValue{Value: changes.ResourceBasedNaming},
			}
			_, err = t.Cloud.EC2().ModifySubnetAttribute(ctx, request)

View on GitHub (pinned to 4c8573c808)

Solutions

1. Check ec2:ModifySubnetAttribute permissions
2. Verify DNS64/RNDR support for the subnet, then retry the apply

When it happens

Trigger: Thrown at upup/pkg/fi/cloudup/awstasks/subnet.go:333 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of kubernetes/kops@4c8573c808 (2026-09-05). Data as JSON: /api/errors/fabb78f730c5a21b. Report an issue: GitHub.